alert http $HOME_NET any -> $EXTERNAL_NET 443 (msg:"ET POLICY HTTP traffic on port 443 (POST)"; flow:to_server,established; content:"POST"; http_method; content:!".etrade.com|3a|443|0d 0a|"; http_header; classtype:bad-unknown; sid:2013926; rev:8;)

Added 2014-10-07 16:22:51 UTC


alert tcp $HOME_NET any -> $EXTERNAL_NET 443 (msg:"ET POLICY HTTP traffic on port 443 (POST)"; flow:to_server,established; content:"POST "; depth:5; content:!".etrade.com|3a|443|0d 0a|"; flowbits:set,ET.HTTP.at.SSL; classtype:bad-unknown; sid:2013926; rev:2;)

Added 2011-11-21 14:46:33 UTC


alert tcp $HOME_NET any -> $EXTERNAL_NET 443 (msg:"ET POLICY HTTP traffic on port 443 (POST)"; flow:to_server,established; content:"POST "; depth:5; flowbits:set,ET.HTTP.at.SSL; classtype:bad-unknown; sid:2013926; rev:1;)

Added 2011-11-17 17:12:16 UTC


Topic revision: r1 - 2014-10-07 - TWikiGuest
 
This site is powered by the TWiki collaboration platform Powered by Perl This site is powered by the TWiki collaboration platformCopyright © Emerging Threats